Overview

This page provides a high-level view of each of the past, current and planned major Tomcat versions.

The way Apache is structured and governed it is impossible to say that there will be no further enhancements, bug fixes or releases for a given version. Therefore, rather than use "No" in the tables below "Highly unlikely" has been used. That said, highly unlikely means exactly that and users of versions that are highly unlikely to see another release, even for security fixes, should consider moving to a later version.

It is anticipated that releases will be provided for a maximum of 3 major versions at any one time.

The "Process" field in the following tables documents what development model is accepted by that project, either Review-Then-Commit or Commit-Then-Review. For RTC model the changes are first proposed in the STATUS.txt file in the root of the project and have to gain at least 3 "+1" votes before being applied. The project members have agreed on several exceptions from the RTC rule (documented below).

Tomcat 9.0.x

Spec versions:

Servlet 4.0, JSP 2.4?, EL 3.1?, WebSocket 1.2?, JASPIC 1.1

Stable:

No

Enhancements:

Yes

Bug Fixes:

Yes

Security Fixes:

Yes

Releases:

Not yet

Release Manager:

TBD

Process:

CTR

Listed on download pages:

Not yet

Tomcat 8.5.x

Spec versions:

Servlet 3.1, JSP 2.3, EL 3.0, WebSocket 1.1, JASPIC 1.1

Stable:

Yes

Enhancements:

Yes

Bug Fixes:

Yes

Security Fixes:

Yes

Releases:

Yes

Release Manager:

Mark Thomas (markt)

Process:

CTR

Listed on download pages:

Yes

Tomcat 8.0.x

Spec versions:

Servlet 3.1, JSP 2.3, EL 3.0, WebSocket 1.1

Stable:

Yes

Enhancements:

Yes

Bug Fixes:

Yes

Security Fixes:

Yes

Releases:

Yes

Release Manager:

Mark Thomas (markt)

Process:

CTR

Listed on download pages:

Yes

Tomcat 7.0.x

Spec versions:

Servlet 3.0, JSP 2.2, EL 2.2, WebSocket 1.1

Stable:

Yes

Enhancements:

Yes

Bug Fixes:

Yes

Security Fixes:

Yes

Releases:

Yes

Release Manager:

Violeta Georgieva (violetagg)

Process:

CTR

Listed on download pages:

Yes

Tomcat 6.0.x

Spec versions:

Servlet 2.5, JSP 2.1

Stable:

Yes

Enhancements:

Unlikely

Bug Fixes:

Yes

Security Fixes:

Yes

Releases:

Yes

Release Manager:

Jean-Frederic Clere (jfclere)

Process:

CTR

Listed on download pages:

Yes

Tomcat 5.5.x

Spec versions:

Servlet 2.4, JSP 2.0

Stable:

Yes

Enhancements:

Highly unlikely

Bug Fixes:

Highly unlikely

Security Fixes:

Highly unlikely

Releases:

Highly unlikely

Release Manager:

Filip Hanik (fhanik)

Process:

CTR

Listed on download pages:

No

Tomcat 4.1.x

Spec versions:

Servlet 2.3, JSP 1.2

Stable:

Yes

Enhancements:

Highly unlikely

Bug Fixes:

Highly unlikely

Security Fixes:

Highly unlikely

Releases:

Highly unlikely

Release Manager:

Mark Thomas (markt)

Process:

CTR

Listed on download pages:

No

Tomcat 3.3.x

Spec versions:

Servlet 2.2, JSP 1.1

Stable:

Yes

Enhancements:

Highly unlikely

Bug Fixes:

Highly unlikely

Security Fixes:

Highly unlikely

Releases:

Highly unlikely

Release Manager:

Bill Barker (billbarker)

Process:

CTR

Listed on download pages:

No

Unsupported versions

The following versions are no longer supported. The source is still available from SVN and both source and binary downloads are available from the archives.

Tomcat 3.0.x

Tomcat 3.1.x

Tomcat 3.2.x

Tomcat 3.3.x

Tomcat 4.0.x

Tomcat 4.1.x

Tomcat 5.0.x

Tomcat 5.5.x

RTC Exceptions

Allow C-T-R for trivial fixes to English messages that are in resource files and those that are inline in the code. This includes typos and rephrasing, but does not include adding/removing message parameters.

Allow C-T-R for any fixes for non-English resource files. The files must use 7-bit characters only. Other symbols must be escaped with \u, as does native2ascii.

Require some indication in the commit message for code that usually is covered by RTC, that this commit was done using C-T-R rule.